topic Re: How to remove disconnected firewall from Panorama in Panorama Discussions

How to remove disconnected firewall from Panorama

rwolsen — Thu, 04 Feb 2021 19:32:21 GMT

We have a Panorama that still has the configuration for a Firewall that was removed. I have tried going through other posts and pages to remove it and it is not working.
So far i have dropped it from Collector Group and Templates. But when i try to remove the Managed device from the summary i get the following message

1-Failed to delete Managed Devices <SN>

<SN> cannot be deleted because of references from:
device-group -> Managed -> devices -> <SN>

How do I remove the device from device-group?

Re: How to remove disconnected firewall from Panorama

BPry — Thu, 04 Feb 2021 20:19:34 GMT

@rwolsen,

If you go under the panorama tab there's a 'Device Groups' tab which you'll want to visit and actually remove the device from the 'Managed' group. Then you'll be able to actually remove the device under Summary.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cmd6CAC

Re: How to remove disconnected firewall from Panorama

rwolsen — Fri, 05 Feb 2021 12:03:52 GMT

I was trying to remove a single entry in the shared Device group. Once i deleted the whole group i was able to remove the missing FW. I then re-created the device group without the missing FW. I was then able to commit, well after i had to open each rule that had the missing fw listed as a target.

Thanks.

Re: How to remove disconnected firewall from Panorama

Steve_Dussault — Fri, 05 Feb 2021 19:31:59 GMT

In some cases it may be necessary to export the configuration and remove the entries for the troublesome firewall from the XML and then reimport the configuration back into Panorama.

HTH

Re: How to remove disconnected firewall from Panorama

1daveg1 — Thu, 09 Sep 2021 19:30:27 GMT

what they don't say is that to "delete from Templates" you go to Templates and uncheck the firewall you wish to delete, then click OK. No Delete button.

Then to to Device Groups and uncheck the firewall there too.

Then back to Managed Devices and your firewall should now be in a separate unassociated group where you can finally check the box and then choose Delete

Re: How to remove disconnected firewall from Panorama

ramcardenas — Tue, 22 Nov 2022 21:27:03 GMT

This was the answer I needed. I just need to remove devices from Device Groups and Templates so that I can delete the firewall from the Managed Devices Summary.